Search CSRC

Some content from historical NIST crypto projects is included here: Advanced Encryption Standard (AES) Development Effort

lwc-forum A lwc-forum@list.nist.gov email mailing list has been established for dialogue regarding NIST's Lightweight Cryptography project. It is an unmoderated mailing list; messages addressed to this list are immediately distributed to all the addresses on the list. Only members are allowed to post messages to the list; however, anyone who wishes to do so may add themselves to the list. To join: mailto:lwc-forum+subscribe@list.nist.gov You will receive a response message from jupyter+subconfirm@list.nist.gov. Please click the "Join" link inside that email to confirm your...

Official comments on the First Round Candidate Algorithms should be submitted using the "Submit Comment" link for the appropriate algorithm. Comments from the pqc-forum Google group subscribers will also be forwarded to the pqc-forum Google group list. We will periodically post and update the comments received to the appropriate algorithm. All relevant comments will be posted in their entirety and should not include PII information in the body of the email message. Please refrain from using OFFICIAL COMMENT to ask administrative questions, which should be sent to pqc-comments@nist.gov The...

For technical inquiries, send e-mail to pqc-comments@nist.gov, or contact: Lily Chen National Institute of Standards and Technology 100 Bureau Drive, Stop 8930, Gaithersburg, MD 20899-8930 P: +1 301-975-6974 or via fax at +1 301-975-8670 Email: lily.chen@nist.gov Answers to germane questions will be posted at https://www.nist.gov/pqcrypto. Questions and answers that are not pertinent to this announcement may not be posted. NIST will endeavor to answer all questions in a timely manner.

NIST has set up a pqc-forum@list.nist.gov mailing list. The mailing list will be used to discuss the standardization and adoption of secure, interoperable and efficient post-quantum algorithms. You must be subscribed to send email to the mailing list. Please use the instructions below to subscribe. To join: mailto:pqc-forum+subscribe@list.nist.gov You will receive a response message from jupyter+subconfirm@list.nist.gov. Please click the "Join" link inside that email to confirm your subscription request. To unsubscribe: mailto:pqc-forum+unsubscribe@list.nist.gov Mailing List...

Historical FAQs Frequently Asked Questions (FAQs) [updated 11/18/2024] Example Files API Notes (Sept 2017) API Notes (March 2017) API Notes (November 2016) API Notes (June 2016) Source Code Files for KATs (Dec 2021) KAT (Sept 2017) KAT (June 2016) Variable Label Test #2048 (June 2016) Variable Message #2048(June 2016) Intermediate Values (June 2016) Note - the intermediate values below were for the draft versions of ML-KEM and ML-DSA. Please use the correct test vectors for the final versions. The Cryptographic Algorithm Validation Program (CAVP) provides full test...

NIST has set up an hpc-security@nist.gov mail listserve. The listserve will be used to discuss the standardization and adoption of secure, interoperable, and efficient High-Performance Computing Security working draft and other items related to this project. You must be subscribed to send email to the listserve. You can use the instructions below to subscribe. To join: hpc-security+subscribe@list.nist.gov You will receive a response message from hpc-security+subscribe@list.nist.gov. Please follow the steps to complete the subscription. To unsubscribe:...

Archived. This page is archived for informational purposes only. See End-of-Life Announcement: NIST SCAP Validation Program. The NIST SCAP Validation Program has concluded. NVLAP terminated SCAP Testing accreditation effective September 2, 2025, and SCAP test methods were removed from affected NVLAP scopes of accreditation as of that date. NVLAP accepted SCAP Validation Test Reports from accredited laboratories only until 12:00 AM (midnight) EDT on September 2, 2025. Previously accredited laboratories (historical reference only) The organizations below were listed as NVLAP-accredited...

While SWID Tags demonstrate a possible standards-based way of tracking the state of installed software products, their fitness to support patch management processes depends on the availability and accuracy of deployed tags. Unfortunately, today most vendors never update a tag after it is installed on the endpoint. As a result, these tags fall out of date as soon as that product is updated. Once this happens, these tags are no longer usable for patch or update management as the state of the associated software product will differ from that reported by the tag. To address this issue, vendors...

The IUT list is provided as a marketing service for vendors who have a viable contract with an accredited laboratory for the testing of a cryptographic module, and the module and required documentation is resident at the laboratory. The CMVP does not have detailed information about the specific cryptographic module or when the test report will be submitted to the CMVP for validation. When the lab submits the test report to the CMVP, the module will transition from the IUT list to the MIP list. If you would like more information about a specific cryptographic module or its schedule, please...

Although most combinatorial testing problems have varying numbers of values per variable, in some cases all variables have the same number of values and a pre-computed array can be found. NIST library of pre-computed covering arrays Arrays are available for t=2 to t=5, with 2 to 6 values per variable, and for t=6 with 2 to 5 values per variable. Large collection of covering arrays available for download (Jose Torres-Jimenez) Data on the smallest uniform covering array sizes for up to 20,000 variables for t=2, and up to 10,000 for t=3 through t=6. (Note that this database...

D.R. Kuhn, R. Kacker and Y.Lei, Random vs. Combinatorial Methods for Discrete Event Simulation of a Grid Computer Network, MODSIM World 2009, Virginia Beach, Virginia, October 14-16, 2009. In Selected Papers Presented at MODSIM World 2009 Conference and Expo, edited by T.E. Pinelli, NASA/CP-2010-216205, National Aeronautics and Space Administration, pp. 83-88. R. Kessel and R. Kacker, A Test of Linearity Using Covering Arrays for Evaluating Uncertainty in Measurement, Advanced Mathematical and Computational Tools in Metrology and Testing (AMCTM VIII), Paris, France, June 23-25, 2008, Series...

In 2012, we co-founded the International Workshop on Combinatorial Testing, focused on theory and application of CT. Papers from previous workshops are listed below. IWCT 2025 A Combinatorial Approach to Reduce Machine Learning Dataset Size Megan Olsen, M S Raunak, Rick Kuhn, Fenrir Badorf, Hans van Lierop, Francis Durso A Search-Based Benchmark Generator for Constrained Combinatorial Testing Models Paolo Arcaini, Andrea Bombarda, Angelo Gargantini Combinatorial Methods for Enhancing the Resilience of Production Facilities Klaus Kieseberg, Konstantin Gerner, Bernhard Garn,...

DON'T assume that 2-way combinations (pairwise testing) will be enough. Empirical data, documented in papers on this site, show that 2-way combinations are important, but a large proportion of faults involve more than two parameters. but DO consider the appropriate level of t-way combinations to be used. It is reasonable to expect that 30% or more of the faults that need to be found in testing may require three factors for detection. DON’T try to develop the input model (the parameters and test values) only from use cases. Considering only use cases is likely to lead to missing some...

NIST includes here a list of events which may be of interest to those involved with post-quantum cryptography. In particular, this list is intended to include events which will promote research in the main areas involved with our post-quantum cryptography standardization project. For example, workshops devoted to the families comprising the Round 2 candidates (lattices, codes, isogenies, multivariate, etc). It should be noted that NIST is not affiliated with or involved with the organizing of these workshops, and is providing this list as a source of information for the community. Any...

Post-quantum candidate algorithm nominations are due November 30, 2017. Call for Proposals Those submission packages that are deemed by NIST to be “complete” will be evaluated for the inclusion of a “proper” post-quantum public-key cryptosystem. To be considered as a “proper” post-quantum public-key cryptosystem (and continue further in the standardization process), the scheme shall meet the following minimum acceptability requirements: The algorithms shall be publicly disclosed and made available for public review and the evaluation process, and for standardization if selected, freely...

Post-quantum candidate algorithm nominations are due November 30, 2017. Call for Proposals NIST will form an internal selection panel composed of NIST employees to analyze the submitted algorithms; the evaluation process will be discussed in Section 5. All of NIST’s analysis results will be made publicly available. Although NIST will be performing its own analyses of the submitted algorithms, NIST strongly encourages public evaluation and publication of the results. NIST will take into account its own analysis, as well as the public comments that are received in response to the posting of...

A total of fifteen statistical tests were developed, implemented and evaluated. The following describes each of the tests. Frequency (Monobits) Test Description: The focus of the test is the proportion of zeroes and ones for the entire sequence. The purpose of this test is to determine whether that number of ones and zeros in a sequence are approximately the same as would be expected for a truly random sequence. The test assesses the closeness of the fraction of ones to ½, that is, the number of ones and zeroes in a sequence should be about the same. Test For Frequency Within A...

Validation Number: 142 Vendor: Red Hat®, Inc. Product Name: OpenSCAP Product Major Version: 1 Product Version Tested: 1.2.13 Tested Platforms: Red Hat Enterprise Linux 6, 32 bit Red Hat Enterprise Linux 6, 32 bit Red Hat Enterprise Linux 7, 64 bit SCAP 1.2 Capabilities: Authenticated Configuration Scanner Common Vulnerabilities and Exposures (CVE) Validated Product Vendor Provided SCAP Information Dates Tested: 11/22/2016 - 2/7/2017 Report Submitted:...

Validation Number: 139 Vendor: IBM Product Name: IBM BigFix Compliance Product Major Version: 9.2 Product Version Tested: 9.2.6.94 CPE 2.3 Tested Platforms: Red Hat Enterprise Linux 5, 64 bit Red Hat Enterprise Linux 5, 32 bit SCAP 1.2 Capabilities: Authenticated Configuration Scanner Common Vulnerabilities and Exposures (CVE) Validated Product Vendor Provided SCAP Information Dates Tested: 3/7/2016 - 5/16/2016 Report Submitted: 5/19/2016 DTR...

Validation Number: 137 Vendor: Microsoft Corporation Product Name: SCAP Extensions for Microsoft System Center Configuration Manager Product Major Version: 3.0 Product Version Tested: v3.0.1154.0 Tested Platforms: Microsoft Windows 7, 64 bit Microsoft Windows 7, 32 bit SCAP 1.2 Capabilities: Authenticated Configuration Scanner Common Vulnerabilities and Exposures (CVE) Validated Product Vendor Provided SCAP Information Dates Tested: 1/20/2015 - 6/9/2015...

Validation Number: 134 Vendor: Qualys Product Name: Qualys SCAP Auditor Product Major Version: 1.2 Product Version Tested: 1.2 (5.10.1 Build: 2) Tested Platforms: Microsoft Windows 7, 64 bit Microsoft Windows 7, 32 bit Red Hat Enterprise Linux 5, 64 bit Red Hat Enterprise Linux 5, 32 bit SCAP 1.2 Capabilities: Authenticated Configuration Scanner Common Vulnerabilities and Exposures (CVE) Validated Product Vendor Provided SCAP Information Dates Tested:...

Validation Number: 132 Vendor: BMC Software Product Name: BMC Server Automation Product Major Version: 8.6 Product Version Tested: 8.6.00.197 Tested Platforms: Microsoft Windows 7, 64 bit Red Hat Enterprise Linux 5, 64 bit SCAP 1.2 Capabilities: Authenticated Configuration Scanner Common Vulnerabilities and Exposures (CVE) Open Checklist Interactive Language (OCIL) Validated Product Vendor Provided SCAP Information Dates Tested: 10/21/2014 - 12/15/2014...

Validation Number: 131 Vendor: IBM Product Name: IBM Endpoint Manager Product Major Version: 9 Product Version Tested: 9.1.1117.0 Tested Platforms: Microsoft Windows 7, 64 bit Microsoft Windows 7, 32 bit SCAP 1.2 Capabilities: Authenticated Configuration Scanner Validated Product Vendor Provided SCAP Information Dates Tested: 9/4/2014 - 10/3/2014 Report Submitted: 10/3/2014 DTR Version: NISTIR 7511 Rev. 3 Validation Test Suite:...

Validation Number: 128 Vendor: Red Hat®, Inc. Product Name: OpenSCAP Product Major Version: 1.0 Product Version Tested: 1.0.8-1.el5_10 Tested Platforms: Red Hat Enterprise Linux 5, 64 bit Red Hat Enterprise Linux 5, 32 bit SCAP 1.2 Capabilities: Authenticated Configuration Scanner Common Vulnerabilities and Exposures (CVE) Validated Product Vendor Provided SCAP Information Dates Tested: 1/1/2013 - 4/1/2014 Report Submitted: 4/17/2014 DTR Version:...